CN1211330A - e-commerce processing system - Google Patents

Abstract

A simple, general-purpose electronic commerce system through on-line communication using a credit card without risks of doing a deal with a bogus merchandise dealer, ensuring safe business dealings. When a card holder purchases an article from a merchandise dealer, the card holder terminal enciphers partial data relating to parties including the merchandise dealer, the card manager, and the distribution dealer of the order data, using a common encryption key effective only between the parties and then transmits the enciphered data to the terminals via the terminal of the merchandise dealer. Each party does its desired business dealing by deciphering the partial data related to itself, using the encryption key in common with that of the card holder.

Description

e-commerce processing system

technical field

The present invention relates to an electronic commerce processing system using Internet, personal computer communication and other on-line communication to carry out business processing, in particular to an electronic commerce processing system using payment cards such as credit cards and debit cards.

Background technique

In recent years, with the popularization of Internet, personal computer communication, etc., these network users have usually used electronic mail order on the Internet or personal computer communication to shop and other commodity sellers to order the required goods through online communication, and carry out the purchase of the goods. Buy.

In this kind of business process, a customer who wants to purchase a product has a payment card such as a credit card or a debit card in advance, and when purchasing a product, the terminal device of the card holder communicates with the product seller via the network. Send data such as the name, address, telephone number of the buyer, the card holder, and the type and quantity of the commodity to be purchased, as well as the card number and expiration date of the card holder. Then, the product seller authenticates the card holder from the card manager (card issuing company) based on the above-mentioned data received at his own terminal device, and performs the product delivery procedure (including entrusting the delivery of the product to the transport service provider) and sending the card to the card issuing company. The company requests processing such as payment for goods. The card issuing company will carry out the following processing, that is, according to the card holder's name, address, telephone number, card number and validity period provided by the commodity seller, the commodity seller will carry out the authentication of the card holder, and then according to the commodity seller provided. Data such as product payment is deducted from the card holder's account (product payment settlement) and the like.

In the above-mentioned e-commerce processing system, it has been pointed out in the past that there are intrusion (hacking to steal communication data), cracking (craking, tampering with communication data), or counterfeit card holders, commodity servers (commodity seller terminals) acquirer gateways , card manager terminal) etc.

At this time, for example, counterfeit card holders can be prevented to a certain extent with the help of databases such as card numbers kept by the card manager. In addition, the upper limit is generally set for the payment amount of the card of each card holder, so the loss caused by the counterfeit card holder does not have a large amount of money.

But other situations are different, especially for counterfeit commodity sellers, who may collect multiple card numbers, validity periods and other card information, and because of misappropriating these card information, it will produce much larger losses than the above.

As a countermeasure to solve the above-mentioned problems, in the past, the card holder's identification number (ID number) and password, or data corresponding to them were used for communication, or a closed user group (closed user group) was usually constructed so that the identification number Even if the password and password are stolen, it will not affect the business transactions that have been carried out using the card. However, it is difficult to solve the above-mentioned problems with the above-mentioned system.

In addition, although people are constantly proposing countermeasures for the above-mentioned problems, such as encrypting communication data with stream public key ciphers such as DES and performing authentication with public key ciphers such as RSA ciphers, in fact, they have not yet been constructed into a simple and universal electronic cipher. business processing system.

In view of the above-mentioned background technical situation, the purpose of the present invention is to provide a simple and general-purpose system that can eliminate the harm caused by counterfeit commodity sellers, etc. E-commerce processing system.

Disclosure of the present invention

In order to accomplish the above-mentioned purpose of the invention, the e-commerce processing system of the present invention is a kind of at least the commodity seller, the card holder who purchases commodities from the commodity seller using the card for payment of goods, and the completion of the payment of goods by using the card. A system in which the managed card manager, as the principal, conducts business processing through online communication in a network including terminal devices owned by each principal, is characterized in that when the card holder uses the card from the commodity seller When purchasing goods, the card holder uses the public encryption key valid only between each party through his own terminal device to purchase the part related to each party other than the card holder in the order data for the said goods. After encryption, the encrypted order data composed of these encrypted data is sent from the card holder terminal device via the commodity seller terminal device to each party except the card holder, and the encrypted order data is received. Each party of the order data decodes a part of the encrypted order data concerning itself only by using the common cryptographic key common to the card holder through their respective terminal devices, and among the parties performing such decoding, all The card manager conducts business processes related to the card manager including providing the commodity seller with authentication of the card holder based on the partial data decoded by his own terminal device, and the commodity seller according to With the partial data decoded by the own terminal device and the authentication of the card holder provided by the card manager, business processing related to the product seller including processing for delivery of the product is performed.

According to the above-mentioned present invention, the card holder who intends to purchase commodities from the commodity seller using the payment card uses the public encryption key valid only among the parties involved in the order data related to the commodity seller and the card. Part of the data of each party other than the card holder, such as the manager, is encrypted, and on this basis, encrypted order data communication consisting of decrypting these encrypted data from the card holder's terminal device via the product seller's terminal device Send to each party concerned including the seller of the product. In this way, by encrypting the order data, its confidentiality can be maintained.

In addition, parties such as merchandise sellers and card managers who have received the encrypted order data decode part of the data related to the parties from the encrypted order data using the common encryption key with the card holder. At this time, for some data that only involves other parties, each party cannot know the decoded content of this part of data because each party does not have a public encryption key for decoding it. The content of the order data is known internally. Therefore, the party concerned cannot misappropriate part of the data irrelevant to it. Therefore, among the parties concerned, the card manager conducts business processing involving the card manager including the process of providing the card holder authentication to the product seller based on the decoded partial data. According to the part of the data decoded by the terminal device of the user itself and the authentication of the card holder provided by the card manager, the user conducts the sale of the product including the process of delivering the product to the card holder. The business process of the reader. Thereby, e-commerce processing can be performed.

Therefore, according to the present invention, order data is encrypted and communicated, so that its confidentiality can be ensured, and parties other than the card holder can know only the minimum necessary data of the order data. For this reason, it is assumed that even if a third party counterfeit the merchandise seller, the counterfeit merchandise seller cannot obtain information related only to the card manager such as the card number or expiration date, so that the counterfeit merchandise seller cannot obtain actual effects. Thus, according to the present invention, the danger of counterfeit product sellers and the like can be eliminated, and the safety of business processing can be ensured. In addition, since the encrypted order data generated in the card holder terminal device is distributed to each party concerned via the product seller, when the card holder purchases a product, the encrypted order data is substantially only communicated to the product. Only the seller is required, and a simple electronic commerce processing system can be realized.

In the above-mentioned e-commerce processing system of the present invention, the order data may also include the place of delivery of the product (it is not limited to the address of the card holder), and the person in charge may also include the sender of the product. transport service provider.

However, at this time, it is preferable to only use the public encryption key between the card holder and the transport service provider to encrypt the data to be sent in the order data, and the transport service provider will decode it according to its own terminal device. The subsequent part of the data including the destination data and the instructions provided by the seller of the commodity are used to send the commodity. By doing so, the place of delivery of the product is known only to the transport service provider among the parties concerned, which is preferable from the viewpoint of confidentiality.

In the present invention, the order data includes the number of the card and the validity period, and the data of the number and the validity period are encrypted only with the common encryption key shared between the card holder and the card manager. Therefore, when using the payment card for business processing, the most important card number and expiration date in the actual payment can only be known by the card manager who must know the data after decoding the encrypted order data. Conversely, parties other than the card manager and the card holder cannot acquire the data of the card number and expiration date. Therefore, the security of the e-commerce processing system can be effectively ensured, and at the same time, counterfeit product sellers who are the most dangerous in the e-commerce processing can be effectively prevented.

In the above-mentioned present invention, although the public cryptographic key can be equally distributed between the card holder and the parties concerned by other predetermined methods, the card holder and the card holder cannot The said common code key between each party concerned, on the side of said card holder, it is preferable to make the inherent and public identifier of each party other than the card holder act on the pre-prepared identifier between the card holders. The card holder's unique secret personal key is generated. On the side of each party other than the card holder, it is preferable to make the card holder's unique and public identifier act on the party's pre-prepared identifier. Generated from the private private key inherent to the principal. Here, the identifier may be the name, title, address, email address on the Internet, area name or combination thereof of each party, which is permanently used and disclosed by each party.

In this way, each party including the card holder generates a public cryptographic key by applying the identifier of the other party who should share the public cryptographic key to his own secret personal key, and each party simply inputs the identifier of the other party. It is possible to generate the public encryption key required for the business process without determining or assigning the public encryption key in advance with one's own private private key. Therefore, the e-commerce processing system of the present invention can be extremely simple and highly versatile. Moreover, the public encryption key itself does not need to be configured in advance, so the confidentiality of the communication data can be ensured, and the security of the electronic commerce processing system can be improved.

Regarding the generation method of the above-mentioned public cryptographic key, for example, in Rolf Blom's paper "NON-PUBLIC KEY DISTRIBUTION/Advances in Cryptology: Proceedings of CRYPTO'82/Plenum Press 1983, pp.231-236", also Rolf Blom's paper "AnOptimal Class of Symmetric Key Generation Systems/Advances in Cryptology: EUROCRYPT'84/Springer LNCS 209, 1985, pp.335-338", or in the Special Publication No. 5-48980, etc., and its detailed description is omitted here.

In the present invention, before the encrypted order data is communicated, it is preferable that the above-mentioned parties communicate with the communication partner of the encrypted order data in advance so as to confirm the parties of the communication party. By confirming the person involved in the e-commerce processing in advance in this way, it is possible to prevent harm from counterfeit product sellers, card managers, etc. in advance, thereby further improving the security of the e-commerce processing system.

Figure overview

Fig. 1 is a system structure diagram of an e-commerce processing system according to an embodiment of the present invention, Fig. 2 is an explanatory diagram showing data processing on the card holder side in the system of Fig. An explanatory diagram of data processing on the principal side.

Best Mode for Carrying Out the Invention

An embodiment of the present invention will be described with reference to FIG. 1 and FIG. 2 .

Referring to Fig. 1, in the e-commerce processing system of the present embodiment, the terminal device 1 of the card holder who holds a payment card (not shown) such as a credit card (credit cart) and a debit card (debit card), the commodity The seller's terminal device 2, the terminal device 3 of the card manager (card issuing company) who manages the payment of the goods using the card, and the terminal device 4 of the transport service provider who is in charge of the delivery business of the commodity seller to manage the commodity, via the Internet ( Internet), personal computer communication network and other networks 5 are connected to each other and can communicate. These card holders, product sellers, card managers and transport service providers become parties involved in electronic commerce processing described below.

Each principal terminal device 1-4 is constituted by a computer device such as a personal computer. These terminal devices 1-4 contain the secret personal key 6 of the public encryption key generation system for generating public encryption keys for encrypted communication between any parties, and encryption for communication data encryption/decoding generated by this public encryption key. The/decoding systems 7 are composed of software or hardware, and these systems 6 and 7 are distributed to the parties in advance by a center that issues encryption keys not shown in the figure.

Here, the above-mentioned secret personal key 6, as seen in the above-mentioned paper of Rolf Blom or Japanese Patent Publication No. 5-48980, etc., is inherent to each party concerned, and the name and location of the communication partner are identified by each party's inherent and public identification. Characters are input into each terminal device 1-4 to generate a public encryption key shared by the other party communicating with it.

The above-mentioned encryption/decoding system 7 adopts the known DES (Data Encryption Standard: Data Encryption Standard) to encrypt the communication data (communication data sending side) by means of the public encryption key, or decode the encrypted communication data (communication data receiving side). side).

The electronic commerce processing system of the present embodiment having the above structure can perform the following electronic commerce processing.

First of all, in the system of this embodiment, each party concerned can communicate with the other party who will carry out the following encrypted order data communication at any time through each terminal device 1-4 through the Internet or personal computer communication. It is confirmed whether or not the counterparty is correct as the parties who should communicate encrypted order data as described below (authentication of the communication partner).

The card holder communicates with the product seller's terminal device 2 through his own terminal device 1 in advance (refer to the home page (home page) of the product seller, etc.), or refers to the product seller's website through a recording medium such as CD-ROM or a magazine, etc. Commodity catalog to obtain commodity information of commodity sellers.

When the card holder intends to purchase the commodity of the commodity seller, the commodity seller is notified of his idea from the card holder, and the commodity seller transmits data in the form of a purchase order. The order form format data can also be acquired in advance from a CD-ROM by the card holder himself.

Next, the card holder inputs order data through the own terminal device 1 in accordance with the acquired order form to purchase desired goods with the own card. At this time, as shown in Figure 2, the order data for input includes: the name of the card holder, address, telephone number, fax number, card number and expiry date that the card holder has, the product name and quantity of the commodity to be purchased, Product number, purchase amount, payment method (installment payment, one-time payment, etc.), place of delivery of the product (including recipient's name, address, etc.), etc.

Of course, the order data is not limited to the above-mentioned data, as long as the product seller, the card manager, and the transport service provider who are the parties involved in the business process when the card holder purchases the product using his/her own card execute the respective processes related to the product processing (commodity processing). Information necessary for the seller to identify the orderer or order content, the card manager to authenticate the card holder and settle the payment, and the transport service provider to deliver the product, etc.).

After making the above-mentioned order data, the card holder extracts the data related to each party such as the commodity seller, the card manager, and the transport service provider (these are determined in advance) from the order data through the terminal device 1 of the card holder. , and copy it. With reference to Fig. 2, if it involves commodity sellers, copy the cardholder's name, address, telephone number, fax number, product name, quantity, commodity number, purchase amount, payment method of the payment, etc. from the above-mentioned order data. In order to determine the data of the orderer or the content of the order, if it is related to the card manager, copy the name, address, telephone number, fax number of the card holder, the card number and the validity period of the card holder, and the product number of the product to be purchased , purchase amount, payment method and other data used to authenticate the card holder or settle the payment. In the case of a transport service provider, the cardholder's name, telephone number, fax number, place of delivery, and other data necessary for delivery of the goods are copied.

The program for the cardholder to perform the above-mentioned processing, or the software for automatically performing such processing, is provided to the cardholder in advance when the commodity seller sends the above-mentioned purchase form format data to the cardholder. The cardholder then follows the procedure for performing the above-mentioned processing or follows the given software. Each part of the data of each party is not limited to the above form. For example, the facsimile number data may not be necessary for all parties. In addition, according to the laws or customs of each country, the card manager may not need the product number, or the product seller may need the product number. sending place.

Furthermore, the card holder inputs the identifiers of the principals of the commodity seller, the card manager and the transport service provider into the said secret personal key 6 in the terminal device 1 respectively, and generates the said key for cryptographic communication with these respective principals respectively. public cryptographic key. At this time, the transport service provider is determined by the commodity seller, and the identifier of the transport service provider or the information required by the card holder to identify it (the name of the transport service provider, etc.) When giving to the card holder, etc., it is given to the card holder in advance. The commodity seller and the card manager are determined by the card holder himself, so the card holder already knows the identifiers of the commodity seller and the card manager.

In this way, after copying part of the data related to each party involved such as the commodity seller, the card manager, and the transport service provider from the order data and generating a public encryption key with these parties, the card holder can The encryption/decoding system 7 of 1, as shown in FIG. 2, encrypts part of the data related to each party with a public encryption key corresponding to each party, and then encrypts the encrypted order data composed of the encrypted parts of the data together. The identifier with the card holder is sent as a set of communication data from the own terminal device 1 to the commodity seller's terminal device 2 via the network 5 (see dotted arrow X in FIG. 1 ). At this time, the cardholder identifier sent with the encrypted order data is unencrypted. In addition, instead of the cardholder's identifier, information (only the cardholder's name, address, etc.) that can specify the cardholder's identifier may be transmitted together with the encrypted order data.

At this time, since the encrypted order data of the main part of the above-mentioned communication data is encrypted, a third party who is not the party concerned cannot decipher it, and the confidentiality of the communication data can be ensured.

In addition, the product seller who has received the above-mentioned communication data (encrypted order data and card holder identifier) at the terminal device 2 inputs the card holder identifier included in the communication data into the secret personal key of his own terminal device 2. 6. Generate a public cryptographic key shared with the cardholder. Referring to FIG. 3 , the commodity seller uses the generated public encryption key to decode the part of data related to himself in the encrypted order data through the encryption/decoding system 7 of his own terminal device 2 . Thus, the cardholder's name, address, telephone number, fax number, product name, quantity, product number, purchase amount, payment method and other necessary data for commodity sellers in the order data are formally obtained.

At this time, part of the data related to parties (card managers and transport service providers) other than the commodity seller is encrypted by a cryptographic key different from the public cryptographic key between the commodity seller and the card holder, so the commodity seller cannot These partial data are decoded, and therefore, the content such as the card number or expiry date related to the card manager or the destination data related to the transport service provider cannot be known.

Furthermore, the product seller sends the encrypted order data and the card holder's identifier to the card manager terminal device 3 from its own terminal device 2 via the network 5 (see dotted arrow Y in FIG. 1 ). At this time, although all the data received by the commodity seller can be sent to the card manager, it is also possible to send to the card manager only part of the encrypted order data related to the card manager and the card holder's identifier.

In this way, the card manager who has received the encrypted order data and the card holder identifier from the product seller terminal device 2 with his own terminal device 3, as in the case of the product seller, enters the card holder identifier into himself. After the secret personal key 6 of the terminal device 3 generates a public cryptographic key shared with the cardholder, as shown in Figure 3, use the public cryptographic key to order the encrypted order through the encryption/decoding system 7 in the terminal device 3 itself. Part of the data related to itself is decoded. Thus, the card holder's name, address, telephone number, fax number, card number and validity period of the card holder, product number of the product to be purchased, purchase amount, and payment are officially obtained from the order data. mode and other data required by the card manager. At this time, the card manager is the same as the product seller, and cannot know the data such as the place of delivery of the product that is only related to the transport service provider in the encrypted order data that is not related to itself.

Afterwards, the card manager who obtains the above data will authenticate the card holder (whether the card holder is a legitimate card user) based on the card holder's name, phone number, card number and expiration date, and send The result of the authentication is notified to the product seller. If the card holder is a legitimate card user, it will be processed according to the purchase amount, payment method and other data, so as to deduct the payment from the card holder's account.

If the authentication result is correct, the commodity seller who has received the notification of the authentication result from the card manager sends the encrypted order data and the card holder identifier to the transport service provider terminal device 4 through the network 5 from his own terminal device 2. (See dotted line arrow Z in Fig. 1), at the same time, according to the part of the data obtained by the seller of the commodity, entrust the delivery of the commodity to the transport service provider, and then arrange the purchase of the commodity according to the needs. At this time, only part of the encrypted order data related to the shipping service provider may be sent to the shipping service provider together with the card holder identifier.

Then, as in the case of commodity sellers and card managers, the shipping service provider who has received the encrypted order data and the card holder identifier from the commodity seller enters the card holder identifier into the secret key of the terminal device 4 of itself. After the personal key 6 generates a public cryptographic key shared with the cardholder, as shown in Figure 3, use the public cryptographic key to pass through the encryption/decoding system 7 in the self-terminal device 4 to encrypt the encrypted order data related to itself. Partial data decoding. In this way, data necessary for the transportation service provider, such as the card holder's name, telephone number, facsimile number, and destination, among the order data, are formally acquired. At this time, the transport service provider, like the commodity seller or the card manager, cannot know the data other than the data related to itself in the encrypted order data, such as the card number and the expiration date.

The transport service provider who has obtained the above-mentioned data on the destination of delivery, etc., sends the product based on the data and the instruction of the product seller.

In the e-commerce processing system of the present embodiment constituted as above, each party (commodity seller, card manager, and transportation service provider) is associated with each party (commodity seller, card manager, and transport service provider) in the order data created by the card holder with a public encryption key different from each party's. (or) the relevant data is encrypted, and the encrypted part of the data is distributed to each party through communication, so the confidentiality of the order data can be ensured. At the same time, each party can freely obtain the required data in the order data by using the public encryption key with the card holder, and on the other hand, only the necessary data can be obtained conversely. Therefore, the most important card number or expiry date for commercial processing with a card cannot be known to a commodity seller or a transport service provider. For this reason, it is assumed that even if a third party impersonates a product seller or a transport service provider, it cannot succeed because important information such as a card number or an expiration date cannot be obtained, thereby preventing counterfeiting of a product seller or a transport service provider.

Each party including the card holder communicates in advance with the other party who will communicate the encrypted order data and confirms the party party, so not only counterfeit product sellers and transport service providers can be prevented, but also counterfeit card managers can be prevented.

The inventors of the present application conducted experiments using the electronic commerce processing system of this embodiment to prove that, in the case of intrusions into the system by various counterfeiters, such intrusions can be completely resisted.

In this embodiment, only the public encryption key between the transport service provider and the card holder is used to encrypt the place where the product is sent, so the product seller or the card manager cannot know the data. Confidentiality can be kept when the product is given as a gift to others.

When the card holder intends to purchase commodities, the encrypted order data is distributed to the card manager or transport service provider other than the commodity seller via the commodity seller terminal device 2, so the card holder only needs to send the encrypted order data to The product seller terminal device 2 is all that is needed, and the product can be purchased conveniently.

In this embodiment, the card holder encrypts part of the data related to the commodity seller, the card manager and the transport service provider, and each party only needs to input the identifier of the required party in the terminal device 1-4. The secret personal key can generate a public encryption key for commodity sellers, card managers, and transport service providers to decode some of their own data. Therefore, it is not necessary to determine the public encryption key between the parties or from the Other centers distribute common encryption keys, so business processes can be easily performed.

Therefore, the electronic commerce processing system of this embodiment can be used as a safe, simple, and versatile system.

In the present embodiment described above, the system shown includes the transportation service provider as the person involved in the e-commerce processing, but it is also possible to configure a system that does not include the transportation service provider, or constitute a gateway (gateway) including an Internet provider (internet provider) or the like. ) The system in which the administrator or key certification authority is the party concerned.

In this embodiment, the shown system generates a public encryption key by each principal inputting the identifier of the required principal into the secret personal key provided on the terminal device 1-4 of the principal, but it is also possible to use other methods to determine the public encryption key among the principals. keys or assign public cryptographic keys from the center. Industrial applicability

The present invention can be applied to a system that conducts business processing with a payment card such as a credit card or debit card through on-line communication with a terminal device such as a personal computer on a network such as the Internet or a personal computer communication network.

Claims (5)

1. electronic commerce processing system, it is characterized in that, be a kind of to major general's commodity seller, use the payment for goods payment to buy the card holder of commodity and pay the card supvr that manages as the party from described commodity seller to utilizing this card to finish payment for goods with card, by comprising the end device system that business processing is carried out in on-line communication in interior network that each party has

When described card holder uses described card to buy commodity from described commodity seller; This card holder by terminal installation own with only respectively with each party between effectively the common key key to buy described commodity with the Partial encryption relevant with each party except this card holder in the order data after; To comprise that encryption order data that these data after encrypting consist of together sends to each party except this card holder from this card holder terminal installation via the communication of described commodity seller terminal device

Each party who receives this encryption order data uses with the public described common key key of described card holder by end device separately the partial data that only relates to itself in the described encryption order data is decoded,

In the party who carries out this decoding, described card supvr is according to the decoded partial data of self end device, comprise to what described commodity seller provided processing that described card holder is authenticated relating to the gerentocratic business processing of card,

Described commodity seller is according to the authentication to described card holder that the decoded partial data of self end device and described card supvr provide, be included as send described commodity processing in the interior business processing that relates to this commodity seller.

2. electronic commerce processing system as claimed in claim 1 is characterized in that, described order data comprises the transmission ground of described commodity, and described party comprises the transportation service person who sends described commodity simultaneously,

Only with the described common key key between described card holder and described transportation service person to sending the ground data encryption described in the described order data,

This transportation service person then carries out the transmission processing of described commodity according to the described partial data of the decoded data of self end device and the indication that described commodity seller provides with comprising described transmission.

3. electronic commerce processing system as claimed in claim 1 is characterized in that, described order data comprises the number and the term of validity of described card, and the data of this number and the term of validity are only encrypted with public described common key key between described card holder and card supvr.

4. electronic commerce processing system as claimed in claim 1, it is characterized in that, the described common key key of respectively working as person between thing beyond described card holder and this card holder, in described card holder one side, be to make the intrinsic and disclosed identifier of each party beyond this card holder act on the intrinsic secret individual key of this card holder that this card holder has in advance and generate, in this card each party's one side beyond the holder, be to make the intrinsic and disclosed identifier of described card holder act on the intrinsic secret individual key of this party that this party has in advance and generate.

5. electronic commerce processing system as claimed in claim 1, it is characterized in that, before carrying out the communication of described encryption order data, described each party can intercom with the communication counterpart of this encryptions order data in advance mutually, and the party of this communication counterpart is said the row affirmation.

Images